Medium
CVE-2024-9610
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2024-9234
GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-9232
Download Plugins and Themes in ZIP from Dashboard <= 1.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-9586
Linkz.ai <= 1.1.8 - Missing Authorization to Unauthenticated Plugin Settings Update
Medium
CVE-2024-9587
Linkz.ai <= 1.1.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update via AJAX
Critical
CVE-2024-9707
Hunk Companion <= 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
Medium
CVE-2024-9436
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.14 - Reflected Cross-Site Scripting
Medium
CVE-2024-8700
Event Calendar <= 1.0.4 - Missing Authorization to Unauthenticated Arbitrary Calendar Deletion
Medium
CVE-2024-9221
Tainacan <= 0.21.10 - Reflected Cross-Site Scripting
High
CVE-2024-9201
SEUR Oficial <= 2.2.10.2 - Unauthenticated SQL Injection
Medium
CVE-2024-9538
ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template
Medium
CVE-2024-9543
Powerpress <= 11.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode
Critical
CVE-2024-9822
Pedalo Connector <= 2.0.5 - Authentication Bypass to Administrator
Medium
CVE-2024-8701
Event Calendar <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9346
Embed videos and respect privacy <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-8913
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template
Medium
CVE-2024-9611
Increase upload file size & Maximum Execution Time limit <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-9205
Maximum Products per User for WooCommerce <= 4.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-9457
WP Builder <= 3.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2024-9581
Shortcodes AnyWhere <= 1.0.1 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-8729
Easy Social Share Buttons <= 1.4.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-8987
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode
Medium
CVE-2024-9067
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion
Medium
CVE-2024-9057
Curator.io: Show all your social media posts in a beautiful feed. <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via feed_id Attribute
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.